September 25th, 2020 📆 | 4377 Views ⚑
# Exploit Title: B-swiss 3 Digital Signage System 3.6.5 - Cross-Site Request Forgery (Add Maintenance Admin) # Date: 2020-09-16 #
September 22nd, 2020 📆 | 7148 Views ⚑
# Exploit Title: BlackCat CMS 1.3.6 - Cross-Site Request Forgery # Date: 2020-06-01 # Exploit Author: Noth # Vendor Homepage:
September 22nd, 2020 📆 | 6126 Views ⚑
CSRF Add b-swiss Maintenance Admin Source link
September 21st, 2020 📆 | 7049 Views ⚑
# Exploit Title: BlackCat CMS 1.3.6 – Cross-Site Request Forgery# Date: 2020-06-01# Exploit Author: Noth# Vendor Homepage: https://github.com/BlackCatDevelopment/BlackCatCMS# Software Link:
September 17th, 2020 📆 | 7599 Views ⚑
RCE Security Advisoryhttps://www.rcesecurity.com 1. ADVISORY INFORMATION=======================Product: Acronis Cyber BackupVendor URL: https://www.acronis.comType: Server-Side Request Forgery CWE-918]Date found: 2020-07-30Date published: 2020-09-14CVSSv3 Score:
September 16th, 2020 📆 | 7543 Views ⚑
# Exploit Title: RAD SecFlow-1v SF_0290_2.3.01.26 - Cross-Site Request Forgery (Reboot) # Date: 2020-08-31 # Exploit Author: Uriel Yochpaz and
September 15th, 2020 📆 | 8156 Views ⚑
# Exploit Title: RAD SecFlow-1v SF_0290_2.3.01.26 – Cross-Site Request Forgery (Reboot)# Date: 2020-08-31# Exploit Author: Uriel Yochpaz and Jonatan Schor#
September 11th, 2020 📆 | 7135 Views ⚑
Scopia XT Desktop 8.3.915.4 Cross Site Request Forgery Posted Sep 9, 2020 Authored by V1n1v131r4 Scopia XT Desktop version 8.3.915.4
September 10th, 2020 📆 | 5049 Views ⚑
Anyone with an email address can get into Facebook and WhatsApp law enforcement portals, designed for law enforcement agents to
September 10th, 2020 📆 | 8349 Views ⚑
# Exploit Title: Scopia XT Desktop 8.3.915.4 - Cross-Site Request Forgery (change admin password) # Google Dork: inurl:scopia+index.jsp # Date:
September 8th, 2020 📆 | 1742 Views ⚑
CVSSv3.1 Score————————————————-AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N Vendor————————————————-Hyland Software – (https://www.hyland.com/en/ and https://www.onbase.com/en/) Product————————————————-Hyland OnBaseAll derivatives based on OnBase Versions Affected————————————————-All versions up to and
September 2nd, 2020 📆 | 6921 Views ⚑
# Exploit Title: Stock Management System 1.0 - Cross-Site Request Forgery (Change Username) # Exploit Author: Bobby Cooke & Adeeb
August 31st, 2020 📆 | 8541 Views ⚑
Apache2: Incorrect handling of large requests in mod_proxy_uwsgi mod_proxy_uwsgi as included in current versions of Apache httpd incorrectly handles largeHTTP
August 26th, 2020 📆 | 2277 Views ⚑
# Exploit Title: Ericom Access Server x64 9.2.0 - Server-Side Request Forgery # Date: 2020-08-22 # Exploit Author: hyp3rlinx #
August 26th, 2020 📆 | 3544 Views ⚑
+] Credits: John Page (aka hyp3rlinx)+] Website: hyp3rlinx.altervista.org+] Source: http://hyp3rlinx.altervista.org/advisories/ERICOM-ACCESS-SERVER-ACCESS-NOW-BLAZE-9.2.0-SERVER-SIDE-REQUEST-FORGERY.txt+] twitter.com/hyp3rlinx+] ISR: ApparitionSec Vendor]www.ericom.com Product]Ericom Access Server x64 for (AccessNow
August 14th, 2020 📆 | 1959 Views ⚑
# Exploit Title: GetSimple CMS Plugin Multi User v1.8.2 - Cross-Site Request Forgery (Add Admin) # Exploit Author: Bobby Cooke
August 13th, 2020 📆 | 5508 Views ⚑
# Exploit Title: GetSimple CMS Plugin Multi User v1.8.2 – Cross-Site Request Forgery (Delete Admin/User)# Exploit Author: Bobby Cooke (boku)
August 11th, 2020 📆 | 6926 Views ⚑
# Exploit Title: Warehouse Inventory System - Cross-Site Request Forgery (CSRF) - Change Admin Password# Exploit Author: Bobby Cooke (boku)
August 10th, 2020 📆 | 5214 Views ⚑
# Exploit Title: Warehouse Inventory System 1.0 - Cross-Site Request Forgery (Change Admin Password) # Exploit Author: Bobby Cooke (boku)
August 7th, 2020 📆 | 6176 Views ⚑
# Exploit Title: All-Dynamics Digital Signage System 2.0.2 - Cross-Site Request Forgery (Add Admin) # Discovery by: LiquidWorm # Discovery
August 7th, 2020 📆 | 5113 Views ⚑
# Exploit Title: Daily Expenses Management System 1.0 – Cross-Site Request Forgery# Date: 2020-8-5# Exploit Author: Edo Maland# Vendor Homepage:
August 7th, 2020 📆 | 8596 Views ⚑
# Exploit Title: Online Shopping Alphaware 1.0 – Cross-Site Request Forgery (Account Takeover)# Date: 2020-8-4# Exploit Author: Edo Maland# Vendor
August 4th, 2020 📆 | 2184 Views ⚑
Stock Management System 1.0 Cross Site Request Forgery Posted Aug 3, 2020 Authored by Bobby Cooke Stock Management System version
July 29th, 2020 📆 | 8328 Views ⚑
Sickbeard 0.1 Cross Site Request Forgery Posted Jul 27, 2020 Authored by bdrake Sickbeard version 0.1 suffers from a cross
Cabot 0.11.12 – Persistent Cross-Site Scripting September 7, 2020 # Exploit Title: Cabot 0.11.12 - Persistent Cross-Site Scripting #…
CyberRisk Alliance Acquires Security Weekly September 8, 2020 NEW YORK, Sept. 08, 2020 (GLOBE NEWSWIRE) -- CyberRisk Alliance…
Dominic Cummings’ plan to build UK Google… September 10, 2020 UK Prime Minister Boris Johnson's top adviser, Dominic Cummings, is…
Windows XP Source Code Leaked By Apparent Bill Gates… September 25, 2020 It’s probably not the biggest security issue that Microsoft is…
Zerologon Proof Of Concept September 17, 2020 Proof of concept exploit for the Windows Zerologon vulnerability as…
European ISPs report mysterious wave of DDoS attacks September 5, 2020 More than a dozen internet service providers (ISPs) across Europe…
UHS hospital network hit by ransomware attack September 28, 2020 Universal Health Services (UHS), a Fortune 500 company and one…
Comments